Re: Run-time taint support proposal
| From: | Ilia Alshanetsky | Date: | Fri, 15 Dec 2006 23:49:49 +0000 |
| Subject: | Re: Run-time taint support proposal | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-27009@lists.php.net to get a copy of this message | ||
On 15-Dec-06, at 6:40 PM, Alain Williams wrote:
OK: so there may be a few cases where it won't work, that does not mean that there won't be great advantages for the majority of situations.I'd wager there would be more then a few instances, but without code its kinda hard to demonstrate.
Because an even more convenient replacement in a form of super-globals was introduced. Ilia AlshanetskyAll it means that this breaks every applications and the security benefits are somewhat ambiguous, but in all fairness the full consequences are hard to predict without sample code.It is OFF by default. RegisterGlobals was initially ON by detault since loosing it broke a lot of code. PHP survived that.